check the storage class specified in PVC is always using CMEK without checking the boot disk from GKE using org policy [390652403]

Assigned

Feature Request

Status Update

No update yet.

Description

mi...@google.com

created issue #1

Jan 17, 2025 06:36PM

Currently the GKE and CMEK organization policies [1] constraints/gcp.restrictNonCmekServices will protect both
- New clusters and node pools
- New Filestore instances and Persistent Disks

It would be good to have a way to choose that CMEK only protects the new Persistent Disks on the organization level for more flexibility.

[1]

https://cloud.google.com/kubernetes-engine/docs/how-to/using-cmek#cmek-org-policy

Comments

ma...@google.com <ma...@google.com> #2Jan 19, 2025 10:36AM

Reassigned to gc...@google.com.

I had the same problem!
I could solve it by putting the .aidl file in an aidl directory.
Look at the attached screenshot to see the project structure.

Issue 390652403

Description

Issue summary

Comments

ma...@google.com <ma...@google.com> #2Jan 19, 2025 10:36AM

Add comment

Issue metadata